Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
File: MhV9a4wSwFtBvEEkHQYVBAryQeE.mft (raw, json)
Hash identifier: TQf2Tsb/8BzjXEKnblGxHDt9ZXZzOXnrejZsMIeproY=
Subject key identifier: 85:EA:0C:8B:9B:A9:F5:AA:20:4B:61:80:0E:4F:12:56:DF:84:9D:A1
Authority key identifier: 32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
Certificate issuer: /CN=32157d6b8c12c05b41bc41241d0615040af241e1
Certificate serial: 0198D4731B4CAE9943BD33CEC23327221006
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
Manifest number: 0364
Signing time: Sat 23 Aug 2025 01:02:49 +0000
Manifest this update: Sat 23 Aug 2025 01:02:49 +0000
Manifest next update: Sun 24 Aug 2025 01:02:49 +0000
Files and hashes: 1: MhV9a4wSwFtBvEEkHQYVBAryQeE.crl (hash: JWTJupk90EvCtrrGoK3OmO6qpJGXiE49SOCoc59BMFg=)
2: qJ1oXPy2zR5AWITHnFOnI8zbBtI.roa (hash: 2JhWie1vdrZ9TGWL5IWneU9ysYNZV//iN2iGhnspRb0=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Sun 24 Aug 2025 01:02:49 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:98:d4:73:1b:4c:ae:99:43:bd:33:ce:c2:33:27:22:10:06
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=32157d6b8c12c05b41bc41241d0615040af241e1
Validity
Not Before: Aug 23 01:02:49 2025 GMT
Not After : Aug 24 01:02:49 2025 GMT
Subject: CN=85ea0c8b9ba9f5aa204b61800e4f1256df849da1
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:97:1f:58:5f:55:b6:12:57:4c:e1:21:93:80:83:
3b:49:97:fd:85:38:d8:46:a0:c1:7e:f2:16:5b:79:
cd:16:62:8a:25:09:53:92:4a:74:49:ea:d7:f8:2f:
b0:ef:79:16:51:88:10:94:03:5d:d2:2d:03:ea:98:
9a:39:a9:7d:54:fb:84:50:e0:08:8d:c1:e7:60:32:
d7:b7:72:dc:16:97:f9:e0:4b:5b:b2:b4:d3:e6:4e:
18:75:fc:a5:73:5c:5e:3b:5b:88:ee:4a:c6:a3:cf:
40:41:58:41:52:27:e4:d0:bf:73:2f:e3:b9:db:52:
d7:40:64:e2:e6:de:f2:33:1d:27:2a:0d:b8:52:5e:
39:a4:ed:4d:fc:7b:83:d5:ce:35:67:de:9a:db:03:
ca:98:7b:99:a2:33:8c:10:07:fc:83:69:67:fd:4f:
b2:8e:50:db:af:30:0e:6b:e4:97:f2:69:04:31:9a:
bb:3d:a7:27:77:96:5c:40:da:ea:29:ed:34:10:b5:
3c:b0:83:c7:2d:31:74:c2:29:3e:b3:42:9e:79:d2:
43:a3:84:23:12:3a:e7:8c:ce:56:1e:5e:96:04:be:
42:4f:10:2a:51:0e:6f:e4:4e:5f:06:68:b5:ed:90:
4d:36:5c:da:ec:0f:50:66:c6:50:06:40:c3:e7:dd:
fe:31
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
85:EA:0C:8B:9B:A9:F5:AA:20:4B:61:80:0E:4F:12:56:DF:84:9D:A1
X509v3 Authority Key Identifier:
keyid:32:15:7D:6B:8C:12:C0:5B:41:BC:41:24:1D:06:15:04:0A:F2:41:E1
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/MhV9a4wSwFtBvEEkHQYVBAryQeE.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/f0/416a80-dc56-4514-8bc0-27f9c823edea/1/MhV9a4wSwFtBvEEkHQYVBAryQeE.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
57:f5:b0:10:e6:c9:10:89:b3:72:87:6e:9d:ad:ac:14:19:f1:
7c:6d:07:a4:7d:eb:75:e2:98:83:50:24:c9:8f:c9:be:46:e2:
1f:65:43:e4:c1:29:02:96:b5:e1:1c:9e:b3:01:11:46:79:40:
fc:33:65:6f:d0:72:67:37:4f:a3:d7:2a:0e:45:f4:8a:5f:54:
d4:93:ed:2f:71:8e:ed:31:c4:6d:5b:1d:10:8b:76:fd:1f:5c:
ae:d7:b6:54:b4:2a:34:b6:85:f2:b0:e7:8c:13:bf:51:cc:c5:
2e:73:2c:6e:84:ea:36:16:c2:54:11:e3:e3:39:ca:9a:c4:59:
40:a6:46:1d:27:b0:ad:ca:e8:2e:2f:87:4b:02:5c:32:6c:91:
29:9f:1b:78:c5:85:06:9f:ac:fa:84:fc:12:5f:5e:03:33:50:
78:3b:77:7d:d2:f4:2b:74:bd:27:ab:23:3f:47:cd:b4:a1:8d:
f2:b9:a6:5c:18:c1:ed:f8:ae:de:7a:42:0f:7a:92:ed:38:60:
2a:1d:4a:f3:58:23:67:35:6e:88:0f:3f:b0:8b:4c:9d:16:77:
f7:66:21:c8:99:d2:fa:3e:e9:22:13:56:1e:8e:67:e2:c3:25:
34:d9:d6:17:83:80:55:fb:95:eb:76:db:67:b8:86:e3:f4:01:
17:72:72:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sat Aug 23 11:39:04 2025 by rpki-client